[pgpool-hackers: 3183] Re: FW: Responsible disclosure

[Tatsuo Ishii]

Hi,

My name is Tatsuo Ishii, one of the core committers of the Pgpool-II
project. Please send me the security issue you found in a private
email.

Best regards,
--
Tatsuo Ishii
SRA OSS, Inc. Japan
English: http://www.sraoss.co.jp/index_en.php
Japanese:http://www.sraoss.co.jp

> I think I hit the wrong email address on my last email so I am forwarding it here. Long story short, we would like to report a critical vulnerability that we have discovered and we are looking to inform the necessary stakeholders. If there is a point of contact for security issues please feel free to contact me directly. If this fails we will pass all the relevant information to the cve lists.
> 
> Thanks
> 
> Kind Regards
> 
> Fotis
> 
> 
> 
> 
> Fotios Rogkotis
>         Security Researcher
> 
> [cid:imageec96f8.PNG at 0f6b6588.4e8e44b3]<http://www.darkmatter.ae>
> 
> Level 15, Aldar HQ
> Abu Dhabi, United Arab Emirates
> T  +971 2 417 1417<tel:+971%202%20417%201417>
> M +971 58 900 1314<tel:+971%2058%20900%201314>
> E  Fotios.Rogkotis at darkmatter.ae<mailto:Fotios.Rogkotis at darkmatter.ae>
> 
> darkmatter.ae<http://darkmatter.ae>
> 
> [Linkedin]<https://www.linkedin.com/company/dark-matter-llc> [Twitter] <https://twitter.com/GuardedbyGenius>
> 
> [Year of Zayed] [cid:image7ac40c.JPG at 6eef6a7d.4db475cb] <http://>
> 
> [HITB]<https://conference.hitb.org/hitbsecconf2018dxb/>
> 
> 
> 
> The information in this email is intended only for the person(s) or entity to whom it is addressed and may contain confidential or privileged information. If you receive this email by error, please notify us immediately, delete the original message and do not disclose the contents to any other person, use or store or copy the information in any medium and for whatever purpose. Any unauthorized use is strictly prohibited.
> 
> From: Fotios Rogkotis <fotios.rogkotis at darkmatter.ae>
> Date: Sunday, December 9, 2018 at 9:56 AM
> To: <pgpool-hackers-bounces at pgpool.net>
> Subject: Responsible disclosure
> 
> Hi there,
> 
> We have tried to reach out few times back regarding a vulnerability that we have discovered. Could someone guide me who to contact?
> 
> Thanks
> 
> Fotis